Payplug

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Payplug records in CISA KEV

No Payplug vulnerabilities are listed in CISA KEV.

2 records

TI-2026-67950 CVE-2026-39751 · GHSA-24gg-q9vh-xg9v

LOW 39

Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00323 Published 2026-10-06 No fix listed CWE-862

TI-2026-68010 CVE-2026-42637 · GHSA-28x2-x4c5-mp8x

LOW 35

Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00318 Published 2026-10-06 No fix listed CWE-862